Re: [patch] document USERGROUPS_ENAB in login.defs(5)

Mike Frysinger <[email protected]> Sat, 8 Apr 2006 14:28:59 -0400
Newsgroups gmane.linux.pld.shadow.general
Organization wh0rd.org
Message-ID <[email protected]>
On Saturday 08 April 2006 10:12, Tomasz Kłoczko wrote:
> On Fri, 7 Apr 2006, Mike Frysinger wrote:
> > seems documentation on this feature is lacking
>
> +           If <emphasis remap='I'>yes</emphasis>, then when a user logs in
> +           and their uid != 0, uid == gid, and their username is the same
> as +           their initial login group, their umask is set to 002 instead
> of +           022.
>
> About UMASK.
> Now above isn't true.
> If PAM is enabled used UMASK for login/su session is managed on PAM level.
> For case non-PAM and any other where UMASK is neccessary shadow uses
> UMASK defined in lib/getdef.h (022).

i didnt really research the option too deeply ... mostly i was going by what 
the NEWS and the login.defs files had to say about it

if you write up something different that's fine by me ... all i want is some 
notes on what USERGROUPS_ENAB does :)
-mike